CVE-2015-1126

Опубликовано: 10 апр. 2015

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors.

Ссылки

http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
Vendor Advisory
http://www.securitytracker.com/id/1032047
https://support.apple.com/HT204658
Vendor Advisory
https://support.apple.com/HT204661
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
Vendor Advisory
http://www.securitytracker.com/id/1032047
https://support.apple.com/HT204658
Vendor Advisory
https://support.apple.com/HT204661
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 8.2 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 6.2.4 (включая)

cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.0.5:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.0.6:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.1.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.1.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.1.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:7.1.4:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:8.0.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:8.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apple:safari:8.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.65446

Средний

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2015-1126

ubuntu

почти 11 лет назад

GHSA-r4c3-86wx-hvpp

github

больше 3 лет назад